41deade4cb5a5694fddf60afff3d2cb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41deade4cb5a5694fddf60afff3d2cb2_JaffaCakes118
Size

63KB
MD5

41deade4cb5a5694fddf60afff3d2cb2
SHA1

0d1658d0ab96b6b36617bf9ac98a2efe66f1418a
SHA256

924dfa8b4c6f09fcae47a77e36360403127c273254048dc650f7e42c975164f1
SHA512

654de57531d717a2387eecdc25ef4edac53d0050ca2c07823481e7c626b1d3067efcf6ac4a8d9211c8e5534ca6ea9cc9a6231caaaee107f63c026e10ee94a257
SSDEEP

1536:K5hn6sd+Y5iImU5lOvtg8LcAAz5XW2/Z+LozBSmNRHPijoNQ3:K5hcY5sU5l2t1AAAdW2/Z+czBSmvis23

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41deade4cb5a5694fddf60afff3d2cb2_JaffaCakes118

Files

41deade4cb5a5694fddf60afff3d2cb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

398f6839c7badb0341a9e056e9ffa369

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatW
CreateWaitableTimerW
CreateTimerQueue
GetTimeFormatA
ExitThread
CreateSemaphoreW
lstrcmpW
GetLocaleInfoW
CreateNamedPipeW
GetCurrentDirectoryW
GetCurrencyFormatW
TlsGetValue
GetModuleHandleA
GetSystemTime
_lwrite
FreeLibrary
GetShortPathNameA
CreatePipe
OpenEventA
OpenEventW
GetStartupInfoW
VerifyVersionInfoW
TlsAlloc
TerminateProcess
GetEnvironmentVariableA
VirtualProtect
GetLongPathNameA
LoadLibraryExA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 785B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ